Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228121	9.3	危険	アップル	-	Apple QuickTime における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0987	2013-06-7 13:48	2013-05-22	Show	GitHub Exploit DB Packet Storm

228122	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0986	2013-06-7 13:42	2013-05-22	Show	GitHub Exploit DB Packet Storm

228123	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0989	2013-06-7 13:38	2013-05-22	Show	GitHub Exploit DB Packet Storm

228124	7.5	危険	アップル Ruby on Rails project	-	Ruby on Rails における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2013-0333	2013-06-7 12:18	2013-01-28	Show	GitHub Exploit DB Packet Storm

228125	10	危険	アップル Ruby on Rails project	-	Ruby on Rails の ActiveRecord におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0277	2013-06-7 12:09	2013-02-11	Show	GitHub Exploit DB Packet Storm

228126	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails の ActiveRecord における attr_protected 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0276	2013-06-7 12:07	2013-02-11	Show	GitHub Exploit DB Packet Storm

228127	2.6	注意	日本ケンタッキー・フライド・チキン株式会社	-	Android 版ピザハット公式アプリ　宅配ピザのPizzaHut における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2013-3641	2013-06-7 12:01	2013-06-7	Show	GitHub Exploit DB Packet Storm

228128	2.6	注意	マイクロソフト	-	Internet Explorer における情報漏えいの脆弱性	CWE-Other その他	-	2013-06-7 12:00	2013-06-7	Show	GitHub Exploit DB Packet Storm

228129	6.4	警告	アップル Ruby on Rails project	-	Ruby on Rails におけるデータベースのクエリ制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0155	2013-06-7 11:58	2013-01-8	Show	GitHub Exploit DB Packet Storm

228130	7.2	危険	アップル	-	CUPS における root として任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5519	2013-06-7 11:50	2012-11-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275731	7.8	HIGH Local	google	android	An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR#1096799.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-10231	2024-11-21 11:43	2018-04-5	Show	GitHub Exploit DB Packet Storm

275732	9.8	CRITICAL Network	google	android	A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091408.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-10230	2024-11-21 11:43	2018-04-5	Show	GitHub Exploit DB Packet Storm

275733	9.8	CRITICAL Network	google	android	In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and alloca…	CWE-119 CWE-190 Incorrect Access of Indexable Resource ('Range Error') Integer Overflow or Wraparound	CVE-2016-10393	2024-11-21 11:43	2018-03-16	Show	GitHub Exploit DB Packet Storm

275734	7.2	HIGH Network	dotcms	dotcms	SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via …	CWE-89 SQL Injection	CVE-2016-10008	2024-11-21 11:43	2018-02-20	Show	GitHub Exploit DB Packet Storm

275735	7.2	HIGH Network	dotcms	dotcms	SQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the _EXT_FOR…	CWE-89 SQL Injection	CVE-2016-10007	2024-11-21 11:43	2018-02-20	Show	GitHub Exploit DB Packet Storm

275736	6.1	MEDIUM Network	broadcom	advanced_secure_gateway symantec_proxysg	The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (prior to 6.7.2.1), ProxySG 6.5 (prior to 6.5.10.6), ProxySG 6.6, and ProxySG 6.7 (prior to 6.7.2.1) management console is susceptible to a ref…	CWE-79 Cross-site Scripting	CVE-2016-10257	2024-11-21 11:43	2018-01-10	Show	GitHub Exploit DB Packet Storm

275737	6.1	MEDIUM Network	broadcom	symantec_proxysg	The Symantec ProxySG 6.5 (prior to 6.5.10.6), 6.6, and 6.7 (prior to 6.7.2.1) management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management consol…	CWE-79 Cross-site Scripting	CVE-2016-10256	2024-11-21 11:43	2018-01-10	Show	GitHub Exploit DB Packet Storm

275738	9.8	CRITICAL Network	d-link	dir-600l_firmware	Session fixation vulnerability in D-Link DIR-600L routers (rev. Ax) with firmware before FW1.17.B01 allows remote attackers to hijack web sessions via unspecified vectors.	CWE-384 Session Fixation	CVE-2016-10405	2024-11-21 11:43	2017-09-7	Show	GitHub Exploit DB Packet Storm

275739	9.8	CRITICAL Network	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10392	2024-11-21 11:43	2017-08-19	Show	GitHub Exploit DB Packet Storm

275740	9.8	CRITICAL Network	google	android	In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.	CWE-20 Improper Input Validation	CVE-2016-10391	2024-11-21 11:43	2017-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed